| amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip |  149.210.250.206 | 301 Moved Permanently | 283 B |
URL User Request GET HTTP/2amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip IP149.210.250.206:443
CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeHTML document, ASCII text Hash47d3d6cb59e1f2cb0ff3a415f5c0995c 74a1525d3006855ea0bced59788b15ae040c19fb 311a3ef5877039326e21dfc540fe44bc5e82b1083a307cb3b65d3831bbc0d3f9
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | Unknown malware | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/FileZilla_3.66.1_win64.zip HTTP/1.1
Host: amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
location: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
content-length: 283
content-type: text/html; charset=iso-8859-1
date: Tue, 16 Apr 2024 15:11:55 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip | 149.210.250.206 | 404 Not Found | 5.6 kB |
URL User Request GET HTTP/2www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip IP149.210.250.206:443
CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash9655d17796074df7ea3db28f1db29583 48d819956fad8382cfaa224b2bd0968a4ef46dc0 cd93b6b07a5a38ab428175d8fcb74b4a4c8d888f0ca8163350a1efcf9124e727
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/FileZilla_3.66.1_win64.zip HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
x-powered-by: PHP/8.1.27
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.amplex-amplification.com/wp-json/>; rel="https://api.w.org/"
set-cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc; path=/
cntctfrm_send_mail=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5647
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 15:11:55 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip | 149.210.250.206 | 404 Not Found | 5.6 kB |
URL User Request GET HTTP/2www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip IP149.210.250.206:443
CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash9655d17796074df7ea3db28f1db29583 48d819956fad8382cfaa224b2bd0968a4ef46dc0 cd93b6b07a5a38ab428175d8fcb74b4a4c8d888f0ca8163350a1efcf9124e727
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/FileZilla_3.66.1_win64.zip HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
x-powered-by: PHP/8.1.27
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.amplex-amplification.com/wp-json/>; rel="https://api.w.org/"
set-cookie: cntctfrm_send_mail=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5647
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 15:11:56 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 | 149.210.250.206 | 200 OK | 15 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeASCII text, with very long lines (59701) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.2 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Tue, 27 Feb 2024 14:48:23 GMT
etag: "1bae5-6125e1e30bbc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 14991
content-type: text/css
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/plugins/contact-form-plugin/css/form_style.css?ver=4.2.9 | 149.210.250.206 | 200 OK | 908 B |
URL GET HTTP/2www.amplex-amplification.com/wp-content/plugins/contact-form-plugin/css/form_style.css?ver=4.2.9 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
Hash91e82f5e673ca1b669a034854c4821eb aa5cae87801eff94c9c75df9d8c49700366dc300 d5d5d10a5e68995a20e341541fd4aecfc14f04b604e8d187fc2566fe67333ad9
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/contact-form-plugin/css/form_style.css?ver=4.2.9 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:10:05 GMT
etag: "14c2-6161d4f9a9d4c-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 908
content-type: text/css
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/themes/argent2/style.css?ver=6.5.2 | 149.210.250.206 | 200 OK | 7.5 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/themes/argent2/style.css?ver=6.5.2 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
Hash27b03c46257f7ea08bbcd39c2e0780ed 5eae44fdcf2870f0e4e3adb8527e7a01b83c3b18 472de36d7b2c5f06879df8b04a320ec9cd0211cd1eb8fe7257c9ba931aaf6e32
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/argent2/style.css?ver=6.5.2 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:08:52 GMT
etag: "808e-6161d4b4175e6-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7501
content-type: text/css
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/themes/argent2/genericons/genericons.css?ver=3.4.1 | 149.210.250.206 | 200 OK | 129 B |
URL GET HTTP/2www.amplex-amplification.com/wp-content/themes/argent2/genericons/genericons.css?ver=3.4.1 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
Hashc14dd6e84e694a66c7e27f11220ed49a d226417ef66b21fca901b5dd49ad570d6992a250 7e3559d6ffac7fc54d6edaa79b6e7330fab33fbdffc174a27c58b25e5b3952d2
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/argent2/genericons/genericons.css?ver=3.4.1 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:08:52 GMT
etag: "9a-6161d4b411056-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 129
content-type: text/css
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.2.1 | 149.210.250.206 | 200 OK | 1.8 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.2.1 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeASCII text, with very long lines (8319) Hash838b8635594eaf90069f97cb52f3bdf0 d70fe6fbedb3b6410047b62dd9b1cfc9dc635352 6c9e9bd4e992b05389236894daba31e34cc03e95c1dcb18fdb229087df1606c6
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=14.2.1 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:10:40 GMT
etag: "2080-6161d51af5d55-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1786
content-type: text/css
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 149.210.250.206 | 200 OK | 30 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 28 Aug 2023 17:14:23 GMT
etag: "15601-603fed35e19c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30368
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 149.210.250.206 | 200 OK | 4.9 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Fri, 09 Jun 2023 05:49:24 GMT
etag: "3509-5fdabee5f2100-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4872
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/themes/argent2/js/skip-link-focus-fix.js?ver=20130115 | 149.210.250.206 | 200 OK | 379 B |
URL GET HTTP/2www.amplex-amplification.com/wp-content/themes/argent2/js/skip-link-focus-fix.js?ver=20130115 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
Hashcaaada24c36ed88a759bf4289b0c6ba8 53276b225e3aee862666004696658819e0282895 5a1a3a3f0ef52a304cde50940ee607a2ebb008b76fa4cf49721b6e5cc07c350a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/argent2/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:08:52 GMT
etag: "2ef-6161d4b412f96-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 379
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/themes/argent2/js/navigation.js?ver=20120206 | 149.210.250.206 | 200 OK | 762 B |
URL GET HTTP/2www.amplex-amplification.com/wp-content/themes/argent2/js/navigation.js?ver=20120206 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
Hash60d6df9d09ad45b6c714cce9eb9204f5 eab9c65f3864a7c3d591686db9c87595dd35c80f e03fd5c486de934f5832ff45253a21bec6333d733064f7dff4389118ec06253e
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/argent2/js/navigation.js?ver=20120206 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:08:52 GMT
etag: "7d8-6161d4b412bae-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 762
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/themes/argent2/js/argent.js?ver=20150326 | 149.210.250.206 | 200 OK | 951 B |
URL GET HTTP/2www.amplex-amplification.com/wp-content/themes/argent2/js/argent.js?ver=20150326 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
Hash1a5b7f5d682c63859dace3156925cfc7 46094372a49a3eba93a45560d32934d6eec019f7 1c3484089afc27476719973c29840063b6d862ad6fb1a2f4088c8291cea514eb
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/argent2/js/argent.js?ver=20150326 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:08:52 GMT
etag: "8d0-6161d4b412bae-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 951
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.2.1 | 149.210.250.206 | 200 OK | 1.1 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.2.1 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJavaScript source, ASCII text, with very long lines (692) Hash56939037655e233f78ff8ef57ab17b8f c00bed043b43f7bd7ba231b62459686c40c3aa13 7d3e02e79c7eb9eacf2ccca9c0145e458eafaeabace4592339c3811a837bed06
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=14.2.1 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:10:40 GMT
etag: "bab-6161d51af1aed-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1051
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.2.1 | 149.210.250.206 | 200 OK | 4.8 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.2.1 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJavaScript source, ASCII text, with very long lines (713) Hashe88d65907c498c5a73bcee516fb5ce03 9cbded7bf9766ea78ecd8636494de632e6051f57 a8a601f7a37c4e3e18f2960f2c09ba71a676fa30ea0af33cd714194b1b03ef2e
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=14.2.1 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:10:40 GMT
etag: "3996-6161d51af2a8d-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4761
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/themes/argent2/genericons/genericons/genericons.css | 149.210.250.206 | 200 OK | 16 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/themes/argent2/genericons/genericons/genericons.css IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeASCII text, with very long lines (18732) Hash101d00c49a73b3bfab3546bb1f1d5199 517c335152c066640de5e990d9c0a20c92a09954 c087c8a6721acd46844b4b620a279247e4e9580e693fe1d87ef701ac4cf641bc
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/argent2/genericons/genericons/genericons.css HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-content/themes/argent2/genericons/genericons.css?ver=3.4.1
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Mon, 15 Apr 2024 07:08:52 GMT
etag: "6e69-6161d4b411826-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16438
content-type: text/css
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 | 149.210.250.206 | 200 OK | 5.1 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.2 HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Tue, 13 Feb 2024 14:36:07 GMT
etag: "4926-61144508b03c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5062
content-type: application/javascript
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Cabin%3A500%2C700%2C500italic%2C700italic%7CAlegreya%3A400%2C700%2C400italic%2C700italic&subset=latin%2Clatin-ext |  142.250.74.106 | 200 OK | 29 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Cabin%3A500%2C700%2C500italic%2C700italic%7CAlegreya%3A400%2C700%2C400italic%2C700italic&subset=latin%2Clatin-ext IP142.250.74.106:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hash10e53f8c30f4c54d5367c2ffdef220e8 29693e4f4fcc173b3c3134e06624c1f6877a1435 42d7be01d9c29caf693bde8b9738940803728344a3e1d24e119eb1423b895934
GET /css?family=Cabin%3A500%2C700%2C500italic%2C700italic%7CAlegreya%3A400%2C700%2C400italic%2C700italic&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amplex-amplification.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 16 Apr 2024 15:11:57 GMT
date: Tue, 16 Apr 2024 15:11:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 | 216.58.207.227 | 200 OK | 28 kB |
URL GET HTTP/2fonts.gstatic.com/s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 IP216.58.207.227:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 28076, version 1.0 Hash876d74bcd0a927aba5be92bf7993f1aa 1ffc2b292eb17625a33feaf5460e84d137846811 dcb085ad0fca889c4a1b898ccc7458c5d586e5740e7b7bffe065ac6a5e247ada
GET /s/cabin/v27/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amplex-amplification.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 12 Apr 2024 17:04:31 GMT
expires: Sat, 12 Apr 2025 17:04:31 GMT
cache-control: public, max-age=31536000
age: 338846
last-modified: Wed, 13 Sep 2023 22:14:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/alegreya/v35/4UaHrEBBsBhlBjvfkSLk96rp5w.woff2 | 216.58.207.227 | 200 OK | 40 kB |
URL GET HTTP/2fonts.gstatic.com/s/alegreya/v35/4UaHrEBBsBhlBjvfkSLk96rp5w.woff2 IP216.58.207.227:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40536, version 1.0 Hash49c4c1c39d8fc26ffeed2fd9220107f6 65f36f4ab1d04aede4e69e6336038b6de7fb79fc a5515264b08d5c69ab750f0b50a7a2491820ffe7d87b47927687086fa55c6a4e
GET /s/alegreya/v35/4UaHrEBBsBhlBjvfkSLk96rp5w.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amplex-amplification.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 06:46:39 GMT
expires: Sun, 13 Apr 2025 06:46:39 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Mar 2023 20:37:46 GMT
content-type: font/woff2
age: 289518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/uploads/2016/04/cropped-DSC1825-192x192.jpg | 149.210.250.206 | 200 OK | 12 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/uploads/2016/04/cropped-DSC1825-192x192.jpg IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82", baseline, precision 8, 192x192, components 3 Hashf9bec62159ebda953df7b9f8b667c954 33853c74ae2170ce904fad4e2fd432a1657c8ea4 faa2305880ebe48ae4068b965d9dc025f0d0a9d4e41d15da71d29542360e5026
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2016/04/cropped-DSC1825-192x192.jpg HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Wed, 20 Apr 2016 18:50:23 GMT
etag: "2f5c-530ef10ef79c0"
accept-ranges: bytes
content-length: 12124
content-type: image/jpeg
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|
| www.amplex-amplification.com/wp-content/uploads/2016/04/cropped-DSC1825-32x32.jpg | 149.210.250.206 | 200 OK | 1.2 kB |
URL GET HTTP/2www.amplex-amplification.com/wp-content/uploads/2016/04/cropped-DSC1825-32x32.jpg IP149.210.250.206:443
Requested byhttps://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip CertificateIssuerLet's Encrypt Subjectamplex-amplification.com Fingerprint2D:0F:BA:E5:84:3B:95:30:E0:7E:AA:9E:30:02:60:DE:23:16:BF:09 ValidityMon, 19 Feb 2024 09:17:28 GMT - Sun, 19 May 2024 09:17:27 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82", baseline, precision 8, 32x32, components 3 Hashe70a53a988ed420ee27b77c595ccf7ea f2cf287f6ec877c818fb5ee89f4479a02e4e8115 a095d11f9150245201c927f04e11fac54e7635b27c43052deea08db39d094c21
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2016/04/cropped-DSC1825-32x32.jpg HTTP/1.1
Host: www.amplex-amplification.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.amplex-amplification.com/wp-includes/FileZilla_3.66.1_win64.zip
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=4dlboi017ncl4c947olb825bcc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
strict-transport-security: max-age=63072000
content-security-policy: default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' 'self' ;img-src * data: blob: 'self'
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
last-modified: Wed, 20 Apr 2016 18:50:23 GMT
etag: "4ad-530ef10ef79c0"
accept-ranges: bytes
content-length: 1197
content-type: image/jpeg
date: Tue, 16 Apr 2024 15:11:57 GMT
server: Apache/2
X-Firefox-Spdy: h2
|
|